CVE-2020-35349

Savsoft Quiz 5 is affected by Cross Site Scripting (XSS) via the field_title input on the custom fields page. The vulnerability is described across multiple sources as XSS, affecting Savsoft Quiz 5. No remediation, exploit specifics, or affected versions are provided in the supplied documents. Ex...

CVE-2020-24609

Savsoft Quiz 5.5 and earlier is affected by CVE-2020-24609 (Stored XSS). The vulnerability resides in the User Registration flow, where an attacker can inject a payload that triggers when the admin visits the Manage Users page, enabling cookie theft. Multiple connected sources corroborate a store...

CVE-2020-27515

CVE-2020-27515 affects Savsoft Quiz v5.0 with a Cross-Site Scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via the Skype ID field. The NVD entry lists CVSS 3.1/6.1 (Network, Low prep, User interaction required, Changed scope) and CVSS 2.0 base 4.3 (Medium). No ...

CVE-2024-4256

Techkshetra Info Solutions Savsoft Quiz 6.0 has a cross-site scripting (XSS) vulnerability in the Category Page editCategory function (/public/index.php/Qbank/editCategory). The issue arises from manipulating the category_name parameter with input like >, which allows script execution in the c...

CVE-2024-34401

Savsoft Quiz version 6.0 is vulnerable to stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The flaw exists in the quiz_name parameter within the index.php/quiz/insert_quiz/ endpoint, allowing attackers to inject and store malicious scripts....